Application #10/521.600 
Amendment dated January 15. 2007 

Amendments to the claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1. (previously presented) A method to secure the execution of a program in an 
electronic assembly having information processing means and information storage 
means, the method comprising: 

- checking the execution time of at least one sequence of said program with 
respect to the normal predetermined execution time of said sequence, by: 

- planning an end of said normal predetermined execution time; 

- planning a point of arrival of said at least one sequence of said program 
according to the normal predetermined execution time of said sequence; 

- starting a counter timer with associated interrupt at the point of departure 
of execution of said sequence; 

- delivering an interrupt on expiry of said counter timer, wherein the 
expiry of said counter timer corresponds to the planned end of the normal 
predetermined execution time of said sequence; 

- determining an actual point of arrival of said sequence when said 
interrupt is delivered; 

- checking if the determined actual point of arrival of said sequence 
corresponds to said planned point of arrival. 

2. (cancelled) 

3. (cancelled) 

4. (cancelled) 

5. (previously presented) The method according to claim 1, further comprising: 
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- checking that the planned point of arrival of said sequence is reached after 
completion of the normal predetermined execution time period so as to protect against 
attacks disturbing the execution of said program. 

6. (previously presented) The method according to claim 1, further comprising: 

- triggering at the start of said sequence an interrupt counter initialised to the 
value of the normal predetermined execution time of said sequence, by: 

- triggering an interrupt in the program execution on expiry of the counter; 

and 

- diverting execution of said program to an interrupt management routine 
in order to check the point of arrival of said sequence. 

7. (previously presented) The method according to claim 6, comprising: 

- if the execution time of said sequence is not normal, said the interrupt 
management routine is immediately followed by a sequence to set a fraud indicator in 
memory or by an interruption of the current execution by another means. 

8. (previously presented) The method according to claims 1, further comprising: 

- adding to said sequence instructions or loops or equivalent so as to equalise the 
execution time of the sequence in all its branches or so that the execution time of said 
sequence is modified if there is an attack. 

9. (previously presented) The method according to claim 6, wherein the interrupt 
management routine is placed at the last location of the program memory or just before a 
shared domain boundary so as to leave the permitted program memory area if an attack 
prevents execution of the interrupt return. 

10. (currently amended) An electronic module having information processing 
means and information storage means containing a program to be executed, the electronic 
module comprising: 

- checking means including a counter timer with triggering of an interrupt on 
expiry a normal execution time of said sequence to check the execution time point of 
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arrival of at least one sequence of said program with respect to the a planned point of 
arrival normal predetermined execution time of said sequence, wherein: 

- said normal predetermined execution time being determined on expiry of 
the counter timer; and 

- said checking means being arranged for triggering said counter timer at 
the point of departure of execution of said at least one sequence of said program; 
and 

- the checking means further including an interrupt handler routine for 
reading a program counter and having means for comparing the program counter 
against the planned point of arrival . 

1 1 . (cancelled) 

12. (currently amended) A card comprising the electronic module according to 
claim 10 or 11 . 

13. (previously presented) A computer program including program code 
instructions to execute steps of the method according to claim 1 when said program is run 
in a computer system. 

14. (previously presented) The method according to claim 5, comprising: 

- triggering at the start of said sequence an interrupt counter initialised to the value 
of the normal predetermined execution time of said sequence, 

- triggering an interrupt in the program execution on expiry of the counter, and 

- diverting execution of said program to an interrupt management routine in order 
to check the point of arrival of said sequence. 

15. (previously presented) The method according to claim 14, wherein if the 
execution time of said sequence is not normal, said interrupt management routine is 
immediately followed by a sequence to set a fraud indicator in memory or by an 
interruption of the current execution by another means. 

16. (previously presented) The method according to claim 5, further comprising: 
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- adding to said sequence instructions or loops or equivalent so as to equalise the 
execution time of the sequence in all its branches or so that the execution time of said 
sequence is modified if there is an attack. 

17. (previously presented) The method according to claim 6, further comprising: 

- adding to said sequence instructions or loops or equivalent so as to equalise the 
execution time of the sequence in all its branches or so that the execution time of said 
sequence is modified if there is an attack. 

18. (previously presented) The method according to claim 7, further comprising: 

- adding to said sequence instructions or loops or equivalent so as to equalise the 
execution time of the sequence in all its branches or so that the execution time of said 
sequence is modified if there is an attack. 
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